Medium
CVE-2025-66070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 56
Reset filters
Medium
CVE-2025-11740
wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection
High
CVE-2025-4203
wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
Medium
CVE-2025-58597
wpForo Forum <= 2.4.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-4406
wpForo Forum <= 2.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Avatar
High
CVE-2025-4224
wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-31420
wpForo Forum <= 2.4.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-0764
wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in update
Medium
CVE-2024-43288
wpForo Forum <= 2.3.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-43289
wpForo Forum <= 2.3.4 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-3200
wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-47869
wpForo Forum <= 2.2.5 - Missing Authorization
Medium
CVE-2023-47872
wpForo Forum <= 2.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-47870
wpForo Forum <= 2.2.8 - Cross-Site Request Forgery via logout()
Critical
CVE-2023-47868
wpForo Forum <= 2.2.3 - Unauthenticated Privilege Escalation
Medium
CVE-2023-2309
wpForo Forum <= 2.1.8 - Reflected Cross-Site Scripting via 'wpforo_debug'
High
CVE-2023-2249
wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents
Medium
CVE-2022-38055
wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) HTML Injection
Medium
CVE-2022-40206
wpForo Forum <= 2.0.5 - Insecure Direct Object Reference to Forum Privacy Change
High
CVE-2022-40192
wpForo Forum <= 2.0.9 - Cross-Site Request Forgery
High
CVE-2022-40200
wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2022-40205
wpForo Forum <= 2.0.5 - Insecure Direct Object Reference to Forum Status Change
High
CVE-2022-40632
wpForo Forum <= 2.0.5 - Cross-Site Request Forgery
High
CVE-2022-38144
wpForo Forum <= 2.0.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.